CVE-2006-0468
Last modified
CVE-2006-0468 is a vulnerability of currently unknown severity. CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages with negative BER lengths, and possibly other vectors, as demonstrated by the ProtoVer LDAP test suite.. EPSS estimates a 10.28% chance of exploitation in the next 30 days.
Description
CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages with negative BER lengths, and possibly other vectors, as demonstrated by the ProtoVer LDAP test suite.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Stalker | Communigate Pro | 5.0 |
| Stalker | Communigate Pro | 5.0.1 |
| Stalker | Communigate Pro | 5.0.2 |
| Stalker | Communigate Pro | 5.0.3 |
| Stalker | Communigate Pro | 5.0.4 |
| Stalker | Communigate Pro | 5.0.5 |
| Stalker | Communigate Pro | 5.0.6 |
| Stalker | Communigate Pro | 5.0c1 |
| Stalker | Communigate Pro | 5.0c2 |
| Stalker | Communigate Pro | 5.0c3 |
| Stalker | Communigate Pro | 5.0c4 |
| Stalker | Communigate Pro | 5.0c5 |
| Stalker | Communigate Pro | 5.0c6 |
| Stalker | Communigate Pro | 5.0c7 |
References
- http://secunia.com/advisories/18640Patch, Vendor Advisory
- http://www.gleg.net/advisory_cg.shtmlPatch, Vendor Advisory
- http://secunia.com/advisories/18640Patch, Vendor Advisory
- http://www.gleg.net/advisory_cg.shtmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-0468?
How severe is CVE-2006-0468?
How do I fix CVE-2006-0468?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-0462SQL injection vulnerability in comentarios.php in AndoNET Bl…
- CVE-2006-0463Cross-site scripting (XSS) vulnerability in IdeoContent Mana…
- CVE-2006-0464Multiple SQL injection vulnerabilities in index.php in IdeoC…
- CVE-2006-0465Cross-site scripting (XSS) vulnerability in risultati_ricerc…
- CVE-2006-0466Cross-site scripting (XSS) vulnerability in search.asp in Go…
- CVE-2006-0467Unspecified vulnerability in Pioneers (formerly gnocatan) be…
- CVE-2006-0469Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, …
- CVE-2006-0470Cross-site scripting (XSS) vulnerability in search.php in My…
- CVE-2006-0471Cross-site scripting (XSS) vulnerability in the bbcode funct…
- CVE-2006-0472Cross-site scripting (XSS) vulnerability in guestbook.php in…
- CVE-2006-0473Cross-site scripting (XSS) vulnerability in the bbcode funct…
- CVE-2006-0474Multiple integer overflows in Shareaza 2.2.1.0 allow remote …
Are you affected by CVE-2006-0468?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
